GRIDLOCK. Personnel. Duration: 3 years, starting in August 2002

Size: px

Start display at page:

Download "GRIDLOCK. Personnel. Duration: 3 years, starting in August 2002"

Jessie Higgins
8 years ago
Views:

1 GRIDLOCK Personnel Joan Feigenbaum, Yale Angelos D. Keromytis, Columbia Jonathan M. Smith, Penn PhD students: Zhong, Ioannidis, Cook Duration: 3 years, starting in August 2002 Research Goals: Security management in large multi-application environments Unified approach to network and host security Virtual Private Services

edu) PhD students: Zhong, Ioannidis, Cook Duration: 3 years, starting in August 2002 Research

2 General Problem Network and host security are now handled separately Incompatible configurations of components Leads to lack of end-to-end coherence Security vulnerabilities Loss of functionality VPN Configuration Packet filtering Firewall Apache Policy CGI CGI Local FS File ACLs Host based Network ACLs File Server Remote FS File ACLs Web Server Outside Inside View based ACLs Credit Card DB

VPN Configuration Packet filtering Firewall Apache Policy CGI CGI Local FS File ACLs Host based

3 GRIDLOCK Hypothesis Unification of network and host access-control mechanisms Technical components: Globally specified, locally interpreted policies Domain-specific policy meta-languages Virtual Private Services: Extend OS notions of virtual machine and process isolation to distributed systems Host 1 Policy Policy File System Data Base Policy Other Policy Network Policy... Host N Policy File System Policy Policy Other Network Host1 File Server FS View1 FS View2 Web Server CGI1 CGI2 Network Layer Network Layer Network Layer Host2 File Server FS View1 FS View2 Host3 Data Base DB View1 DB View2

Host 1 Policy Policy File System Data Base Policy Other Policy Network Policy.

4 Virtual Private Services Examples, in increasing order of complexity: Distributed database Virtual network infrastructure Virtual organization To achieve vision, we need: Efficient policy-enforcement mechanisms for the different components High-level, domain-specific policy languages Tools for verifying correctness and consistency Automated administration Starting point: trust management KeyNote trust-management system Distributed policy expressed explicitly and via credentials

different components High-level, domain-specific policy languages Tools for verifying correctness and consistency

5 Challenges Devising good application-domain (AD) languages Expressive, usable, efficiently implementable Cover multiple applications within a domain Managing diverse security mechanisms Example: filesystem vs. firewall semantics Conflict resolution and non-monotonicity Scalability Automating administration Performance

diverse security mechanisms Example: filesystem vs.

6 Current Activities Develop tools PEPL: framework for creating AD-specific languages DisCFS: credential-based network filesystem WebDAVA: user-managed, web-based file storage Translate AD-specific policies to KeyNote Use conflict-resolution capabilities of trust-management engines Augment existing access-control points with KeyNote Lightweight decision making Leverage localization of access control for scalability Enhance KeyNote as needed

conflict-resolution capabilities of trust-management engines Augment existing access-control points with

7 Planned Experimentation Deploy shared filesystem across the three institutions Combine file-access control, firewall configuration, and web-server ACLs Use environment for joint authoring of reports and papers Implement full-fledged distributed database Extend to storage marketplace Integrate payment mechanism Virtual organization Combine network services and distributed-database services Integrate VPN and QoS capabilities

papers Implement full-fledged distributed database Extend to storage marketplace Integrate payment

8 First-Year Accomplishments Sample of publications from first year - "EasyVPN: IPsec Remote Access Made Easy," USENIX LISA, October "Secure and Flexible Global File Sharing," USENIX Freenix, June "Experience with the KeyNote Trust Management System: Applications and Future Directions," 1st International Conference on Trust Management, May "Design and Implementation of Virtual Private Services," IEEE WETICE, June "WebDAVA: An Administrator-Free Approach to Web File-Sharing," IEEE WETICE, June "Sprite: A Simple, Cheat-proof, Credit-based System for Mobile Ad-Hoc Networks," IEEE Infocom, April "Verifiable Distributed Oblivious Transfer and Mobile Agent Security," DIALM/POMC, September 2003 DisCFS prototype ( PEPL compiler ( WebDAVA prototype (

WebDAVA: An Administrator-Free Approach To Web File-Sharing

WebDAVA: An Administrator-Free Approach To Web File-Sharing Alexander Levine Alexander.Levine@drexel.edu Drexel University Vassilis Prevelakis vp@drexel.edu Drexel University John Ioannidis Sotiris Ioannidis